Skip to content
Snippets Groups Projects

CAA Extensions for the Tor Rendezvous Specification

Open Q Misell requested to merge TheEnbyperor/tor:caa into main

This MR implements the 343-rend-caa proposal, in support of draft-misell-acme-onion.

It allows adding CAA records (as in the DNS) to hidden service descriptors to aid the security of issuing TLS certificates to .onion Special-use Domain Names. Example:

HiddenServiceDir /var/lib/tor/test_hs/
HiddenServicePort 80 127.0.0.1:8888
HiddenServiceCAA 0 issue "test.acmeforonions.org"
HiddenServiceCAA 0 iodef "mailto:q@magicalcodewit.ch"
HiddenServiceCAA 128 validationmethods "onion-csr-01"

Further details about this project can be found at acmeforonions.org.

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
Please register or sign in to reply
Loading